Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.cer (raw, json)
Hash identifier: ZF/FNylG67AbHx4HOqYkmseKagZ7Tv3+qeO3Mi87dD0=
Subject key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D99D2C0B95DF8D731F475207C733F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198257
IP: 185.153.0.0/22
IP: 2a03:aee0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9d:2c:0b:95:df:8d:73:1f:47:52:07:c7:33:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:6b:73:01:7b:e1:5d:c0:5c:6b:b9:b7:27:
78:eb:66:b4:1e:c9:ab:eb:b7:c6:52:c3:53:67:be:
74:a6:58:b3:ab:a1:17:d2:85:7f:a2:c6:0c:da:40:
88:de:88:91:b8:85:a7:74:be:af:4d:47:37:cf:aa:
e4:68:99:5c:15:f5:0c:5a:af:ee:ce:4d:ab:50:7b:
9e:c2:70:0b:0a:16:71:ba:3b:6d:8e:94:9c:4c:1d:
04:f0:d7:58:4c:22:ea:dc:56:05:c0:f0:6c:d1:6f:
4e:a6:98:a4:30:90:7a:10:f6:eb:4c:59:e8:21:fd:
35:d9:fa:16:d4:d9:33:96:65:63:1c:5b:23:25:5f:
84:cb:e7:39:8e:a3:da:28:d0:e8:80:8c:92:b5:84:
ef:3c:49:8a:96:4f:9c:77:54:79:3d:84:b5:55:1d:
5c:b1:3c:be:7a:d9:c5:ae:19:34:15:e5:4c:81:54:
d7:23:d3:88:62:e1:d2:50:dd:43:64:ed:94:9f:34:
af:b7:b1:ce:29:71:2c:2f:12:f4:c9:ca:46:0e:eb:
eb:ab:28:3d:80:9a:50:0b:0b:7a:2a:74:2d:df:fe:
e8:2a:5e:3a:f4:46:ab:d6:e7:fa:e0:7b:fa:83:f0:
49:af:10:a2:25:67:1b:1b:e9:92:f4:e7:55:04:a3:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.0.0/22
IPv6:
2a03:aee0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198257
Signature Algorithm: sha256WithRSAEncryption
35:6f:10:aa:bb:f3:b6:87:0e:95:34:ab:06:24:c8:cb:9e:64:
e0:98:2b:2d:3c:5c:05:67:73:88:e5:29:53:4b:57:58:6f:e8:
43:4f:7b:2e:a4:85:23:5c:18:4e:06:3e:01:a4:d4:1a:54:6f:
e3:37:c6:b5:6f:e6:a4:78:29:7a:25:ba:91:b0:67:a3:cf:c9:
58:49:6e:31:13:68:3c:f3:66:d1:86:b6:b2:d3:d0:8e:be:85:
b5:af:54:a0:80:9f:28:44:db:5a:f6:19:0a:0f:3f:8f:5b:81:
a3:0f:11:51:62:9c:29:28:87:ab:51:3f:0a:3b:4a:89:f3:39:
77:1a:94:85:4a:28:a4:87:35:95:8b:ae:19:d6:75:60:1d:ff:
dc:09:42:db:b2:37:e9:ed:14:14:21:b7:98:41:ec:e9:4f:61:
63:11:2f:5d:84:f4:d9:cc:df:26:6f:b3:5c:71:ce:ed:55:46:
2c:f6:06:dc:54:a2:2b:cf:c5:ee:9e:3a:a9:48:8f:ec:48:e4:
d6:18:cd:67:84:cb:76:30:fc:ed:00:2a:43:d4:00:b6:24:34:
b9:2b:2f:4d:44:9b:8e:01:fd:39:50:4d:cb:2a:1b:39:c6:a1:
45:2a:48:72:a2:b5:07:6e:70:3e:e5:1b:d9:9a:e4:55:26:05:
7d:03:10:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:09:28 2025 by rpki-client